It's Fixed in the Next Release
So, i got the assignment of setting up a web server to execute code on a remote client machine. I started planning what was needed for this to be successful. Things the system needed to do :
To performe test of the system, it was decided that this would be made in a closed environment (no outside access) inde a Virtual machine. The setup looks like this : 
Gonna go through each of them : WAN device is a OpenWRT running in a virtual machine with 2 NIc’s attached to it. The virtual machine is like this
This machine is responsable for the system’s routing and internet access. The Linux machine is running a XAMPP. This is the machine that makes it all happen. It has 1 NIC
The machine is hosting the website that will be used to target windows xp machines with the exploite called “Uninitialized Memory Corruption” Last we have the windowx xp machine. This computer has 1 NIC aswell
The sole purpose of this machine is to be hacked. Everything about this machine screams “hack me” since almost all the software is at least 3 years old. (In order to make this also old hack possible).
This time we will be trying to integrate Phpmyadmin with Nginx and MariaDB. We are using Arch Linux since its my preferred distribution, but all of these commands are not very specific to the distribution you choose to work with. PhpMyAdmin is one of the most famous tools for managing the MySQL database, and is…
Been working on the SMTP script for the Raspberry, but I’ve decided to change direction regarding some specifics of my project. Originally I wanted my Raspberry to crack a wireless network completely on its own. This is accomplished, but with VERY varying results. The problem arises when there are many networks in range of my device,…
While there still is a lot of work left with the technical part of the project, I wanted to reach out and see if I would run into any problems with the legal stuff. I wrote emails explaining my project to both Datatilsynet and Digitaliseringsstyrelsen. Datatilsynet responded after a while with a request to call them,…
Since my Raspberry Pi is up and running now, I needed some networks to hack. There is some legal issues when trying this out on random networks. To avoid any of these issues, I got myself a new router, by doing this I could try out as many different wireless configurations as i wanted to…
Now that we are closing in on the day we have to upload the final report. I did some research into the specific exploits used in the crimepack. I know for a fact that the method used is called “Uninitialized Memory Corruption”. This is not enough to describe the exploit in itself. The term Uninitialized Memory…
Comments